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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S. C. 1 02 that form the 
basis for the rejections under this section made in this Office action: 

\ A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the United 
States before the invention thereof by the applicant for patent, or on an international application by another who 
has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this title before the invention 
thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act of 1999 
(AIPA) and the Intellectual Property and High Technology Technical Amendments Act of 2002 
do not apply when the reference is a U.S. patent resulting directly or indirectly from an 
international application filed before November 29, 2000. Therefore, the prior art date of the 
reference is determined under 35 U.S.C. 102(e) prior to the amendment by the AIPA (pre-AIPA 
35 U.S.C. 102(e)). 

2. Claims 1-41 are rejected under 35 U.S.C. 102(e) as being anticipated by Shimizu 
etal. (U.S. Patent No. 6,085,323). 

As to claim 1, Shimizu et al discloses a content management method for a data storage 
provided with a plurality of content storing means (See column 1, lines 66-67), comprising the 
steps of: 

decrypting, with a first storage key, a content key encrypted with the first 
storage key and stored along with a content encrypted with the content key in a first 
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content storing means (See column 4, lines 34-55); 

encrypting the content key obtained by the above decryption with a newly 
generated second storage key (See column 3, lines 6-40); and 

storing the content key encrypted with the second storage key along with the 
encrypted content in a second content storing means (See column 3, lines 59-66). 

As to claim 2, Shimizu et al. discloses wherein the second storage key is generated based 
on a random number (See column 7, lines 53-55, also see column 12, lines 46-57). 

As to claim 3, Shimizu et al. discloses wherein the content key obtained by the 
decryption is encrypted with identification information of the second content storing means and 
stored into the second content storing means (See column 3, lines 59-66, also see column 13, 
lines 15-25). 

As to claim 4, Shimizu et al. discloses wherein the content key is encrypted, in the first 
content storing means, with the first storage key and identification information of the first 
content storing means, and the content key stored in the first content storing means is decrypted 
with the first storage key and identification information of the first content storing means (See 
column 2, lines 48-65). 



As to claim 5, Shimizu et al. discloses wherein the second storage key is generated by a 
decrypted key generating means provided in the data storage (See column 3, lines 6-35). 
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As to claim 6, Shimizu et al discloses wherein the second storage key is encrypted with a 
public key for a key management unit for management of the storage keys to generate a third 
storage key and the third storage key is stored into the second content storing means (See column 
7, lines 4-49, and see column 8, lines 19-33). 

As to claim 7, Shimizu et al. discloses wherein the data storage deletes the second storage 
key depending upon whether the third storage key has been stored in the second content storing 
means (See column 24, lines 43-50). 

As to claim 8, Shimizu et al discloses wherein when decrypting the content key stored in 
the second content storing means, the data storage sends the third storage key to the key 
management unit; and the key management unit generates a second storage key based on the 
third storage key while accounting the data service following a predetermined procedure (See 
column 10, lines 61-67, and column 11, lines 1-10, wherein "third key" reads on "temporary 
key"). 

As to claim 9, Shimizu et al. discloses wherein the second storage key is generated by a 
storage key generating means provided in the key management unit which manages the storage 
keys; and the key management unit has stored therein the second storage key and the 
identification information of the second content storing means in which the content key 
encrypted with the above generated second storage key (See column 4, lines 14-33). 
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As to claim 10, Shimizu et al. discloses wherein upon the generation of the second 
storage key, the key management unit accounts the data service following the predetermined 
procedure (See column 1 1, lines 1-25, also see column 19, lines 8-21) 

As to claim 11, Shimizu et al. discloses wherein the key management unit (See column 
13, lines 6-25) encrypts the second storage key with the management key to generate a third 
storage key, and sends the third storage key to the data storage (See column 25, lines 10-22, also 
see column 26, lines 52-55); and 

the data storage stores the received third storage key into the second content storing 
means (See column 9, lines 20 r 32). 

As to claim 12, Shimizu et al. discloses wherein the data storage deletes the second 
storage key depending upon whether the third storage key has been stored in the second content 
storing means (See column 20, lines 26-32, also see column 

As to claim 13^ Shimizu et al. discloses wherein the key management unit has stored 
therein the identification information of the second content storing means in which the content 
key encrypted with the second storage key; the data storage sends, when decrypting the content 
key stored in the second content storing means, the identification information of the second 
content storing means to the key management unit (See column 2, lines 59-65, also see column 
13, lines 15-25, also see column 24, lines 43-49); and 
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the key management unit generates a second storage key based on the result of 
comparison between the identification information of the second content storing means, send 
from the data storage, and the identification information of the second content storing means, 
held in the key management unit itself, while accounting the data service following the 
predetermined procedure (See column 9, lines 65-67, and column 10, lines 1-30). 

As to claim 14, Shimizu et al. discloses wherein the second content storing means has 
stored therein the identification information of the data storage (See column 10, lines 19-30, also 
see column 2, lines 59-65). 

As to claim 15, Shimizu et al. discloses wherein the data storage starts decrypting the 
content key stored in the second content storing means depending upon the result of an 
inspection of the identification information of the data storage, stored in the second content 
storing means (See column 10, lines 1-50). 

As to claim 16, Shimizu et al discloses wherein the decrypted content key supplied from 
the second content storing means has added thereto information that the content key is a one 
obtained by restoration (See column 15, lines 13-48, also see column 16, lines 25-34). 



As to claim 17, Shimizu et al. discloses wherein when moving the content key having 
added thereto the information that the content key is a restored one, the data storage makes an 
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error process based on the result of comparison between the content key and a content key stored 
in a destination to which the content key is to be moved (See column 23, lines 15-49). 

As to claim 18, Shimizu et al. discloses wherein the content key has added thereto 
frequency information which limits the number of times the content key can be used (See 
column 15, lines 28-35, also see column 15, lines 49-52). 

As to claim 19, Shimizu et al discloses wherein the content key stored in the first content 
storing means is stored along with the identification information of the first content storing 
means into the second content storing means; the identification information stored in the second 
content storing means is stored into the data storage when the content key stored in the second 
content storing means is decrypted (See column 20, lines 27-67, also see column 24, lines 43-49, 
also see column 10, lines 19-30); and 

the data storage makes, when a request is made to decrypt the content key in the first 
content storing means, an error process based on the result of comparison between the 
identification information of the first content storing means in consideration and the 
identification information of the second content storing means (See column 9, lines 48-64, also 
see column 10, lines 7-30). 

As to claim 20, Shimizu et al discloses a content storage system, comprising: 
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a first content storing means having stored therein a content key encrypted with a first 
storage key and a content encrypted with the content key (See column 24, lines 57-67, and see 
column 25, lines 1-7); 

means for decrypting a data and key data; 

means for encrypting the data and key data; 

means for generating a storage key (See column 24, lines 23-39); 

a second content storing means for storing an encrypted content key obtained by 
encrypting, in the encrypting means, the content key obtained by decryption with the first storage 
key in the decrypting means, using the second storage key generated by the storage key 
generating means, and the encrypted content; and means for storing the storage keys (See 
column 3, lines 6-22). 

As to claim 21, Shimizu et al. discloses wherein the storage key storing means generates 
the second storage key by means of a random number generator (See column 7, lines 53-55, also 
see column 12, lines 46-57). 

As to claim 22, Shimizu et al. discloses wherein a content key obtained.by encrypting, in 
the encrypting means, the content key obtained by the decryption in the decrypting means, with 
the first storage key and identification information of the second content storing means, is stored 
in the second content storing means (See column 10, lines 61-67, and see column 1 1, lines 6, 
also see column 24, lines 50-66). 
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As to claim 23 , Shimizu et al discloses wherein the content key is encrypted, in the first 
content storing means, with the first storage key and identification information of the first 
content storing means; and the content key stored in the first content storing means is decrypted 
with the first storage key and identification information of the first content storing means (See 
column 2, lines 48-65). 

As to claim 24, Shimizu et al. discloses wherein the first content storing means, 
decrypting means, encrypting means, second content storing means, storage key storing means 
and storage key generating means form together a data storage (See column 2, lines 49-65); and 
further comprising a key management unit which manages the storage keys of the data storage 
(See column 13, lines 15-25). 

As to claim 25, Shimizu et al discloses wherein the data storage is a data receiver which 
receives a content encrypted and sent from a data transmitter (See column 1, lines 60-67, also see 
column 12, lines 40-45, also see column 26, lines 36-49). 

As to claim 26, Shimizu et al. discloses comprising means for storing the public key of 
the key management unit; and wherein the second content storing means has stored therein the 
second storage key along with a third storage key obtained by encrypting the second storage key 
with the public key (See column 19, lines 53-67, also see column 9, lines 20-47, wherein "third 
key" reads on "temporary key"). 
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As to claim 27, Shimizu et al discloses wherein the data storage deletes the second 
storage key depending upon whether the third storage key is stored in the second content storing 
means (See column 24, lines 43-50). 

As to claim 28, Shimizu et al. discloses wherein when decrypting the content key stored 
in the second content storing means, the data storage sends the third storage key to the key 
management unit; and the key management unit sends a second storage key generated based on 
the third storage key to the data transmitter while accounting the data service following a 
predetermined procedure (See column 1 1, lines 1 1-45). 

As to claim 29, Shimizu et al. discloses wherein the second content storing means has 
stored therein the identification information of the data storage (See column 14, lines 22-52). 

As to claim 30, Shimizu et al. discloses wherein the data storage starts decrypting the 
content key stored in the second content storing means depending on the result of inspection of 
the identification information of the data storage, stored in the second content storing means (See 
column 10, lines 1-50). 

As to claim 31, Shimizu et al. discloses wherein the first content storing means, 
decrypting means, encrypting means, second content storing means and storage key storing 
means form together a data storage (See column 2, lines 49-65); and comprising the storage key 
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generating means and further a key management unit which manages the storage keys of the data 
storage (See column 13, lines 15-25). 

As to claim 32, Shimizu et al. discloses wherein the data storage is a data receiver which 
receives a content encrypted and sent from a data transmitter (See column 1, lines 60-67, also see 
column 12, lines 40-45, also see column 26, lines 36-49). 

As to claim 33, Shimizu et al. discloses wherein the key management unit comprises an 
identification information storing means in which the storage key generated by the key 
management unit and the identification information of the content storing means in which the 
content key encrypted with the generated storage key (See column 25, lines 10-23, also see 
column 13, lines 15-25). 

As to claim 34, Shimizu et al. discloses wherein the key management unit accounts the 
data service following the predetermined procedure depending upon the generation of the storage 
key (See column 12, lines 40-62). 

As to claim 35, Shimizu et al. discloses wherein the key management unit comprises 
means for storing storage keys (See column 13, lines 6-25); 

the key management unit generates a third storage key by decrypting the second storage 
key with the storage key and sends it to the data storage (See column 25, lines 10-22, also see 
column 26, lines 52-55); and 
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the data storage stores the third storage key into the second content storing means (See 
column 9, lines 20-32). 

As to claim 36, Shimizu et al. discloses wherein the data storage deletes the second 
storage key depending upon whether the third storage key is stored into the second content 
storing means (See column 4, lines 34-55). 

As to claim 37, Shimizu et al. discloses wherein the key management unit comprises 
means for storing the second storage key and the identification information of the second content 
storing means in which the content key encrypted with the second storage key is stored (See 
column 2, lines 60-65, also see column 24, lines 57-67, and see column 25, lines 1-7); 

the key management unit accounts, when the data storage decrypts the content key, the 
data service following the predetermined procedure based on the result of comparison between 
the identification information of the second content storing means, sent from the data storage, 
and the identification information stored in the identification information storing means (See 
column 10, lines 1-50). 

As to claim 38, Shimizu et al. discloses wherein the second content storing means has 
stored therein the identification information of the data storage (See column 14, lines 22-52). 



As to claim 39, Shimizu et al. discloses wherein the data storage starts decrypting the 
content key stored in the second content storing means (See column 11, lines 1-30). 
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As to claim 40, Shimizu et al. discloses wherein the content key obtained by decryption 
from the second content storing means has added thereto information that the content key is a 
one obtained by restoration, as requirement information (See column 15, lines 13-48, also see 
column 16, lines 25-34). 

As to claim 41, Shimizu et al. discloses wherein the content key has added thereto 
frequency information which limits the number of times the content key can be used (See 
column 12, lines 46-57, also see column 10, lines 8-18). 

Conclusion 

3. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Johnson et al (U.S. Patent No. 5,778,068) teaches personal access management system. 

Ishii (U.S. Patent No. 5,768,389) teaches method for generation and management of 
secret key of public key cryptosystem. 

Kuroda et al. (U.S. 6,421,779 Bl) teaches electronic data storage apparatus, system, and 
method. 

Okamoto et al. (U.S. Patent No. 6,1 18,874) teaches encrypted data recovery method 
using split storage key and system thereof. 

Blumenau et al. (U.S. Patent No. 6,493,825 Bl) teaches authentication of a host 
processor requesting service in a data processing. network. 
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4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Neveen Abel-Jalil whose telephone number is 703-305-81 14. 
The examiner can normally be reached on 8:00AM-4: 30PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov Popovici can be reached on 703-305-3830. The fax phone number for the 
organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is 703-305-3900. 



Neveen Abel-Jalil 
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SUPERVISORY PATENT EXAMINER 
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